Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
File: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft (raw, json)
Hash identifier: nSgCqFcKinfs3ztTvRL20zSWF+DkuRMAbP3nlx8qbNw=
Subject key identifier: 2B:8A:D5:80:2B:4D:7C:97:14:69:21:6F:06:00:61:32:F9:E4:E6:9B
Authority key identifier: 0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
Certificate issuer: /CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Certificate serial: 019F183039F1EB2F986E5198BCC3EAD4A4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
Manifest number: 1662
Signing time: Tue 30 Jun 2026 11:00:41 +0000
Manifest this update: Tue 30 Jun 2026 11:00:41 +0000
Manifest next update: Wed 01 Jul 2026 11:00:41 +0000
Files and hashes: 1: DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl (hash: T97XMEuNsu3Z+ZhIzounWxy49GWhCshUhQ7Zo7VwWSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:39:f1:eb:2f:98:6e:51:98:bc:c3:ea:d4:a4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f0b9a5fe0389fadcbbfb1fa1c40c4a4ba0d2b
Validity
Not Before: Jun 30 11:00:41 2026 GMT
Not After : Jul 1 11:00:41 2026 GMT
Subject: CN=2b8ad5802b4d7c971469216f06006132f9e4e69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:75:7e:cc:c7:7f:3f:5a:82:a4:16:50:27:
9c:22:ad:e4:02:37:27:bb:d4:64:b3:c0:7a:c9:49:
ff:2b:63:63:db:90:29:5e:d0:36:97:ff:9d:4d:64:
d1:0b:b1:37:9a:bd:40:20:5b:87:33:0e:2e:31:59:
64:af:88:20:f2:28:57:7d:ce:d7:c0:e0:18:2e:d1:
66:f6:f0:93:80:0e:20:6d:f3:f1:a0:c0:e1:cf:95:
b0:26:ff:55:db:a0:7f:90:16:7a:87:07:44:e7:80:
9b:a8:41:a4:fa:84:3c:14:b6:09:64:55:26:b5:1f:
78:b3:5d:58:95:f6:68:f1:09:9a:4e:3d:69:ad:f5:
13:26:1d:8f:3e:68:a6:b9:82:0d:60:ef:ee:cb:98:
0a:03:64:82:e9:9b:4b:59:46:d9:6d:fd:09:3d:bc:
a5:11:fc:85:51:94:ad:ad:84:5c:d7:d3:c4:42:18:
dd:8b:f7:fc:eb:e9:12:d2:34:02:61:c0:0d:8f:ad:
bc:98:82:65:8e:1d:0a:73:58:b1:51:ea:67:61:66:
7e:8d:87:67:c3:4d:1d:20:b2:c1:ae:f1:84:77:f7:
48:e1:8f:4c:95:0e:ee:88:83:bf:ba:e5:50:bb:d8:
7a:52:d2:78:32:96:10:13:79:20:e5:01:cf:c3:6a:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:D5:80:2B:4D:7C:97:14:69:21:6F:06:00:61:32:F9:E4:E6:9B
X509v3 Authority Key Identifier:
keyid:0C:4F:0B:9A:5F:E0:38:9F:AD:CB:BF:B1:FA:1C:40:C4:A4:BA:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/90ba17-09dc-4b7d-a453-f606ace4acc2/1/DE8Lml_gOJ-ty7-x-hxAxKS6DSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:34:a8:8c:ef:4d:26:7b:90:50:c8:0f:61:82:b2:5d:b6:81:
68:88:0d:70:d0:a0:95:d3:c6:77:d6:37:da:a8:2c:57:02:6e:
44:57:47:45:42:61:aa:81:32:b4:0a:df:05:e2:c9:b0:9d:71:
ba:f0:4a:57:a7:f0:6a:78:3b:00:38:29:19:d7:d5:7f:d7:16:
43:91:6e:2b:7b:c9:74:7a:e6:6c:b3:ed:07:b8:61:03:4d:81:
ef:60:da:3c:cc:fa:fd:2c:45:b6:43:bf:8c:de:a8:a7:9f:a9:
c1:e8:39:bb:aa:df:43:d2:10:1b:e8:78:94:4a:a5:c6:70:e8:
22:17:59:33:cd:7a:62:0b:5d:17:90:88:4d:27:f6:3c:4b:aa:
59:0a:32:18:d5:77:31:81:48:f9:05:53:a3:12:f0:69:c4:b1:
5d:1d:58:f5:92:a7:cb:49:d3:d2:82:30:b1:4f:21:ff:83:40:
29:f9:b6:48:e6:a9:e7:b3:af:3e:2d:bc:0d:39:3b:ff:16:55:
de:02:3d:32:a7:29:6b:f0:7e:f8:d8:a7:da:c2:f1:5d:4b:38:
00:cd:83:03:9c:9f:67:3f:66:a1:e3:54:3c:0e:5f:d9:81:93:
1d:d3:32:43:42:f6:cb:08:fb:60:0d:1d:b8:39:f2:d0:6e:ce:
b8:ee:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:56 2026 by rpki-client